Privacy policy
As of 9 November 2026
1. Controller
The controller for the processing of your personal data is iweb4u Aliquò, sole proprietorship, owner Antonio Aliquò, Resedastrasse 8, 9404 Rorschacherberg, Switzerland. wooable is a brand of iweb4u Aliquò. Please send questions and requests regarding data protection to hello@wooable.io.
2. Scope
This policy applies to the website www.wooable.io in all language versions, to signing up for a plan and to the agency panel at www.wooable.io/panel/. We process personal data under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, section 13 applies in addition.
3. Hosting and server logs
The website is hosted by our provider SuisseInter in Switzerland. For every request the server stores a log with IP address, time, requested address, referring page, browser and operating system. We need these logs for operation, security and troubleshooting. They are deleted after 14 days.
4. No advertising cookies, no trackers
The website sets no cookies and does not embed any advertising or analytics services. We load the typeface from our own server. In your browser's storage the page remembers the currency you chose for the prices and, if you arrive via a partner's referral link, that partner's identifier (for example «milo») for the duration of your visit. The currency does not leave your browser; the identifier is only passed to the plan page if you sign up there (section 7). You can delete both at any time in your browser settings. Section 8 applies to the panel.
5. The try-out on the website
The try-out currently shows an example result. What you enter in the field stays in your browser and is not transmitted.
6. Contact by email
If you write to us, we use your details to answer your request. We keep emails for as long as necessary for handling them and for any cooperation.
7. Signing up and payment via Stripe
If you sign up for a plan, the payment service Stripe processes the payment (Stripe Payments Europe, Limited, Ireland). You enter your payment details directly with Stripe; we do not receive card or account data. Stripe creates a customer account for you and stores your payment method in order to charge it automatically at the start of each billing period. From Stripe we receive name, email address, company, the country of the billing address, the identifiers of customer, plan and invoices and the status of each payment; Stripe issues the invoices on our behalf.
We store company, contact person and email address from the sign-up form, the chosen tier, billing and currency, your browser's time zone for suggesting the currency, your IP address at sign-up and, if you came via a referral link, the partner's identifier. We show the partner (currently AI with Milo) your agency's name, the tier, the status of the plan and the amounts paid so that we can settle a commission; the partner does not receive any contact details. We use this information to handle the plan, create your panel account, send you the invitation link, check the success guarantee and keep our accounts. Stripe also processes data for fraud prevention and to meet legal obligations under its own privacy policy (stripe.com/privacy); data may be transferred to the USA in the process. For payments with TWINT, TWINT AG, Zurich, is also involved.
8. The panel
For logging in we store user name, email address and role, the password only in encrypted form. A session cookie keeps you logged in until you close the browser or are inactive for 8 hours; we also store your chosen language and display. We store failed logins with internet connection and time for one day to protect against attacks.
In the panel we store your agency's details (company, address, logo, brand colour) and the projects you create with their checks, notes, follow-ups and recorded projects won. For checks, our server fetches public pages of the website being checked and uses check and search services: Wikidata (Wikimedia Foundation, USA), online directories such as local.ch and search.ch, the W3C validation service and the search service Serper (queries to Google, processing in the USA and Singapore), to which we send the domain and at most the name of a legal entity.
For the market analysis we send search term and place to Serper and receive public Google Maps listings (company name, address, phone, industry, website, ratings); we briefly fetch the home pages of the websites found. Businesses without a detailed check are deleted after 90 days, the others after 12 months. Operators can object to the use of their details at any time. For the accessibility check we fetch up to 25 public pages of a website; we keep the results for 12 months and the fetched pages for 90 days.
For the social media profile we only retrieve publicly available information through official interfaces: for YouTube via the YouTube API Services of Google, for Instagram, where the interface is available, via the Instagram Graph API of Meta. Only the channel identifier or account name is transmitted. We store data from these interfaces for at most 30 days; after that only our evaluation remains. The YouTube Terms of Service (youtube.com/t/terms) and the privacy policies of Google (policies.google.com/privacy) and Meta (facebook.com/privacy/policy) also apply.
Via "Help & feedback" we store your message, the page and browser you write from and, if you wish, an image; we keep this for 12 months. We delete an agency's projects and checks 90 days after the plan ends.
The agency is responsible for the data of its clients and prospects in the panel; we process it on its behalf under the plan terms (data processing on behalf).
9. Signal leads and website widget
Agencies with a plan receive signal leads in the panel: references to websites whose operators checked them themselves in our public website check, with the result and a company profile from public sources (company, legal form, company ID, name and role of owner or management, address, phone and email). Each website goes to one agency at most. The agency is responsible for contacting the business. Where this information comes from is described in the privacy policy of the website check at www.iweb4u.ch/en/datenschutz.html.
If an agency embeds the website widget on its website, a separate privacy notice of the agency, linked in the widget, applies to its visitors. We process these enquiries on behalf of the agency, store no IP addresses and set no cookies.
10. Recipients and disclosure abroad
We only pass on personal data to the parties named in this policy: hosting (SuisseInter, Switzerland), payment (Stripe, TWINT), check and search services (Serper, Wikidata, W3C, online directories) and the interfaces YouTube API Services (Google) and Instagram Graph API (Meta). Some of these services process data in the USA or in other countries without equivalent data protection. Where the provider is certified under the Swiss-U.S. Data Privacy Framework, we rely on that, otherwise on standard contractual clauses where the provider offers them. Neither exists for Serper and Wikidata; we therefore only transmit publicly available information to them and as little personal data as possible.
11. Retention
We keep personal data for as long as needed for the purposes stated or required by law: server logs 14 days, failed logins one day, data from interfaces 30 days, market analyses 90 days or 12 months, accessibility checks and help requests 12 months, projects until 90 days after the plan ends, plans and invoices 10 years (statutory retention).
12. Your rights
You can request information about your personal data, a copy in a common format, the correction of inaccurate data and the deletion of data that is no longer needed, and you can object to processing. Please write to hello@wooable.io; we may ask for proof of your identity. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (www.edoeb.admin.ch).
13. Users from the EU
Where the GDPR applies, we rely on the contract for plan and panel (Art. 6(1)(b) GDPR), on legal obligations for accounting (point c) and on our legitimate interest in the operation and security of the website and the tools in the panel (point f). You can also lodge a complaint with the data protection authority of your country.
14. Changes
We update this policy when our processing changes. The version published on this page applies.